Staff Security Engineer (AI)

Location: Toronto, Canada

Company

hirify.global is a Series B startup building a sales compensation platform that manages billions in annual commissions for enterprise customers.

What you will do

• Design and implement security controls across AWS environments, including IAM, least-privilege access, encryption, secrets, certificates, networking, Kubernetes, containers, and serverless workloads.
• Lead threat modeling and security architecture reviews for products, APIs, data pipelines, integrations, multi-tenant services, and AI or agentic workflows.
• Protect sensitive compensation, financial, customer, and employee data through tenant isolation, fine-grained access controls, logging, and auditability.
• Embed security testing into CI/CD, improve software supply-chain security, and establish vulnerability management, remediation, exception, and escalation standards.
• Improve detection, monitoring, incident response, tabletop exercises, runbooks, root-cause analysis, and security metrics.
• Strengthen identity governance, access reviews, compliance controls, customer security reviews, security tooling, and security enablement across Engineering.

Requirements

• At least eight years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering.
• Hands-on experience securing AWS environments, including IAM, networking, encryption, logging, and secrets management.
• Experience with Terraform, Kubernetes, containers, CI/CD security controls, vulnerability management, threat modeling, incident response, and security automation.
• Strong understanding of application and API security, authentication, authorization, and multi-tenant SaaS risks.
• Ability to write scripts with Python, Bash, PowerShell, or a similar language.
• Strong communication, troubleshooting, and cross-functional collaboration skills.

Nice to have

• Experience with SOC 2, ISO 27001, privacy programs, or enterprise customer security reviews.
• Experience securing analytics platforms, data pipelines, sensitive customer data, AWS security services, EKS, Datadog, Wiz, Snyk, or CrowdStrike.
• Experience securing AI applications, large language models, agents, or Amazon Bedrock workloads.
• Experience in a B2B SaaS or high-growth technology company, or relevant security and cloud certifications.

Culture & Benefits

• Employee stock ownership plan in addition to base compensation.
• Medical, dental, vision, disability, and life insurance coverage.
• Paid parental leave.
• $750 annual training stipend.
• Opportunity to grow as an individual contributor or people leader.
• Collaborative, precise, customer-focused, and continuously improving work environment.

Hiring process

• This is an existing vacancy.
• Qualified candidates will be shortlisted.